From the operations security perspective, BCP is to ensure that the continuity of IT operations is maintained from the primary or alternate locations during an incident or disastrous events based on the business continuity requirements. An important consideration is that the security levels are maintained during such operations.
Before we plunge deeper into the myriad concepts of the BCP domain, let's recap some of important concepts in the risk assessment and risk management areas:
Risk is the probability that a threat agent could exploit vulnerability and the resulting impact. The impact may be related to the loss of money, resources, customer confidence, reputation, or legal and regulatory noncompliance and related issues.
Threat is an event that could affect business operations.
Vulnerability is a weakness in the system that a threat could exploit.
In the BCP domain, our focus will be on specific threat events that could cause devastating impacts on the...